CVE-2022-22769

The CVE-2022-22769 entry concerns the Web server component of TIBCO EBX and related Add-ons/Product and Service Catalog. A stored cross-site scripting (XSS) vulnerability allows a low-privileged attacker with network access to execute scripts on the affected system, with human interaction require...

CVE-2019-17333

CVE-2019-17333 affects TIBCO EBX Web server: authenticated users may trigger stored XSS in versions 5.8.1.fixS and below, and 5.9.3–5.9.7. The issue is due to the Web server component vulnerability described in the TIBCO advisory, with CVSS v3 base score up to 8.0 (HIGH). Remediation provided: up...

CVE-2022-41565

CVE-2022-41565 – TIBCO EBX XSS vulnerability : The Web Application component in TIBCO EBX and the Product/Service Catalog powered by EBX is vulnerable to a stored XSS that requires network access and a low-privilege attacker. Affected releases are: TIBCO EBX 5.9.21 and below; TIBCO EBX 6.0.11 and...

CVE-2021-35498

The CVE affects the TIBCO EBX Web Server component and describes an insecure login mechanism where, under certain conditions, an attacker can enter a non-legitimate password that is accepted as valid. Affected products and versions include TIBCO EBX: 5.8.123 and below; 5.9.3–5.9.14; 6.0.0–6.0.1; ...